I know the issue of BSOD and sound cards has been addressed before, more than once. I have not quite made sense out of some of the postings, and am not sure that they apply to the behavior I am seeing.

Often, but not, I think always, if I have used Sandboxie during a session (web browser running sandboxed) the PC shuts down in an unusual manner. When I shut down, it goes very quickly compared to the usual shut down timing. It ends with a BSOD for MULTIPLE_IRP_REQUEST_COMPLETE. When I restart the machine it reports that it has recovered from a serious error and sometimes gives additional information that points to the sound card. The mini dump file, which I find hard to read, despite comments on the forum of "read it" or "send it to me and I will read it", does include text of "devldr32.exe". (Is there a program for reading these?)

Here's the real question:
In the sandboxie window, under Sandbox>Defaultbox> Settings, in the menu tree item for Lingering Programs, the program devldr32.exe is listed as a program to end if it is still running when the other programs in the sandbox terminate. Is this part of the problem? Or, is there a way to have sandbox not include devldr32.exe in the sandbox, even if it is called by a program running in the sandbox? That is, is there a way to exclude devldr32.exe from being put into the sandbox at all?

Thanks for any help!
JK

I am not sure the minidump can help here. A better approach is perhaps that you use the new Resource Access Monitor in Sandboxie 3.29.19 to identify any audio-related resources that may cause devldr32.exe to need to be loaded. We may then be able to allow sandboxed programs direct access to these audio-related resource, and that should (ideally) remove the need to run a sandboxed copy of devldr32.exe.

To try it, select File -> Resource Access Monitor in Sandboxie Control, then start some program sandboxed that would cause devldr32.exe to run sandboxed. Play some audio. Finally click the close button in Resource Access Monitor to copy the information, then paste it here.

Thanks!

I was unable to post the following and am trying a different browser, per tzuk's suggestion via email:

Thanks for the reply. The version I have installed is 3.28. When
checking for updates it reports none available. The download page
also shows 3.28 as current. Where do I get 3.29.xx?

In the email he also pointed me at:
As for the newer version, please see the first topic in the forum.
It is called: Sticky:
<http://www.sandboxie.com/phpbb/viewtopic.php?t=3690>Sandboxie 3.29
Test Versions (Latest: 3.29.22)

Which I will try now to see if the suggested technique helps.

JK

I was a little slow in doing this, so I ended up using v 3.30 instead.

I found that opening the Resource Manager from the File menu gave me a window with no contents in the interactive/reporting section. It also did not allow me to go anywhere else in Sandboxie while it was open.

I closed the Resource Manager and ran an internet streaming radio program sandboxed. Devldr32.exe showed up immediately in the main Sandboxie window. It actually started with several instances that then collapsed to one. The Resource Manager window did not show anything when I reopened it. (The window says to read the docs before using. I clicked on the online docs menu item under Help, but those are clearly much older. They don't mention the Resource Manager.)

I cleared out the sandbox and the programs. On reboot, I again got the BSOD and again got the MS warning on restart that Windows had recovered from a serious error. It pointed at the sound card.

I updated the hardware drivers through the MS website. Tried again, same results. (I don't think devldr32 changed with the update.)

I seem to be mis-using the Resource Manager capability. What do I need to do differently?

TIA
JK

Sorry - I did it wrong for the previoius post.

Here's the contents of the Resource window afer running an audio application.

(Drive) \Device\CdRom0
(Drive) \Device\CdRom1
(Drive) \Device\Floppy0
(Drive) \Device\HarddiskVolume1
(Drive) \Device\HarddiskVolume2
(Drive) \Device\HarddiskVolume3
(Drive) \Device\HarddiskVolume4
(Drive) \Device\HarddiskVolume5
(Unk) 00000004 \Device\00000048
(Unk) 00000004 \Device\00000048\{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}&{9b365890-165f-11d0-a195-0020afd156e4}
(Unk) 00000004 \Device\00000048\{cd171de3-69e5-11d2-b56d-0000f8754380}&{9b365890-165f-11d0-a195-0020afd156e4}
(Unk) 00000022 \Device\Emu10k1
(Unk) 00000022 \Device\KSENUM#00000001\{9B365890-165F-11D0-A195-0020AFD156E4}
(Unk) 00000022 \Device\KSENUM#00000002\{146F1A80-4791-11D0-A5D6-28DB04C10000}\暠᪇拎ᇏ횥�섄
(Unk) 00000022 \Device\KSENUM#00000002\{9B365890-165F-11D0-A195-0020AFD156E4}
(Unk) 00000022 \Device\NTPNP_PCI0013
(Unk) 00000022 \Device\NTPNP_PCI0013\Wave
(Unk) 00000022 \Device\SandboxieDriverApi
(Unk) 00000022 \Device\WMIDataDevice
(Unk) 0000002F \Device\sysaudio
(Unk) 00000039 \Device\KsecDD
Clsid -------------------------------
Ipc -------------------------------
Ipc \BaseNamedObjects\_!MSFTHISTORY!_
Ipc \BaseNamedObjects\c:!documents and settings!jack!cookies!
Ipc \BaseNamedObjects\c:!documents and settings!jack!local settings!history!history.ie5!
Ipc \BaseNamedObjects\c:!documents and settings!jack!local settings!temporary internet files!content.ie5!
Ipc \BaseNamedObjects\C:_Documents and Settings_Jack_Cookies_index.dat_851968
Ipc \BaseNamedObjects\C:_Documents and Settings_Jack_Local Settings_History_History.IE5_index.dat_2277376
Ipc \BaseNamedObjects\C:_Documents and Settings_Jack_Local Settings_Temporary Internet Files_Content.IE5_index.dat_3080192
Ipc \BaseNamedObjects\crypt32LogoffEvent
Ipc \BaseNamedObjects\Devldr32
Ipc \BaseNamedObjects\SbieDllDummyEvent_2340
Ipc \BaseNamedObjects\SbieDllDummyEvent_3864
Ipc \BaseNamedObjects\SbieDllDummyEvent_3940
Ipc \BaseNamedObjects\SbieDllDummyEvent_3948
Ipc \BaseNamedObjects\SbieDllDummyEvent_4260
Ipc \BaseNamedObjects\SbieDllDummyEvent_4408
Ipc \BaseNamedObjects\SbieDllDummyEvent_4612
Ipc \BaseNamedObjects\SBIPC0000092p80_R
Ipc \BaseNamedObjects\SBIPC0000092p80_R_Lock
Ipc \BaseNamedObjects\SBIPC0000092p80_W
Ipc \BaseNamedObjects\SBIPC0000092p80_W_Lock
Ipc \BaseNamedObjects\SBIPC00001138!_R
Ipc \BaseNamedObjects\SBIPC00001138!_R_Lock
Ipc \BaseNamedObjects\SBIPC00001138!_W
Ipc \BaseNamedObjects\SBIPC00001138!_W_Lock
Ipc \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}
Ipc \BaseNamedObjects\shell.{7CB834F0-527B-11D2-9D1F-0000F805CA57}
Ipc \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Ipc \BaseNamedObjects\UrlZonesSM_Jack
Ipc \BaseNamedObjects\userenv: User Profile setup event
Ipc \BaseNamedObjects\ZoneAttributeCacheCounterMutex
Ipc \BaseNamedObjects\ZonesCacheCounterMutex
Ipc \BaseNamedObjects\ZonesCounterMutex
Ipc \BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc O \BaseNamedObjects\CiceroSharedMemDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.Asm.MutexDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.AsmListCache.FMPDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.Compart.MutexDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.Layouts.MutexDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.LBES.MutexDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.ThreadMarshalInterfaceEvent.00000E28.00000000.00000018
Ipc O \BaseNamedObjects\CTF.ThreadMIConnectionEvent.00000E28.00000000.00000018
Ipc O \BaseNamedObjects\CTF.TimListCache.FMPDefaultS-1-5-21-1935655697-2147026751-1343024091-1004MUTEX.DefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.TimListCache.FMPDefaultS-1-5-21-1935655697-2147026751-1343024091-1004SFM.DefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\CTF.TMD.MutexDefaultS-1-5-21-1935655697-2147026751-1343024091-1004
Ipc O \BaseNamedObjects\DirectSound Administrator capture focus array
Ipc O \BaseNamedObjects\DirectSound Administrator capture focus array (lock)
Ipc O \BaseNamedObjects\DirectSound Administrator shared thread array
Ipc O \BaseNamedObjects\DirectSound Administrator shared thread array (lock)
Ipc O \BaseNamedObjects\DirectSound DllMain mutex (0x00000924)
Ipc O \BaseNamedObjects\hardwaremixercallback
Ipc O \BaseNamedObjects\MidiMapper_Configure
Ipc O \BaseNamedObjects\MidiMapper_modLongMessage_RefCnt
Ipc O \BaseNamedObjects\mixercallback
Ipc O \BaseNamedObjects\mmGlobalPnpInfo
Ipc O \BaseNamedObjects\MSCTF.CheckThreadInptIdle.Event.IAO.JOIOBM
Ipc O \BaseNamedObjects\MSCTF.CheckThreadInptIdle.Event.IAO.LBJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO..LBJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO.B.LBJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO.C.LBJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO.D.LBJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO.E.LBJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO.F.JDJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.IAO.G.JDJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.ICO.GH.JDJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.ICO.HH.JDJOBM
Ipc O \BaseNamedObjects\MSCTF.MarshalInterface.FileMap.ICO.IH.JDJOBM
Ipc O \BaseNamedObjects\MSCTF.SendReceive.Event.IAO.IC
Ipc O \BaseNamedObjects\MSCTF.SendReceive.Event.ICO.IC
Ipc O \BaseNamedObjects\MSCTF.SendReceiveConection.Event.IAO.IC
Ipc O \BaseNamedObjects\MSCTF.SendReceiveConection.Event.ICO.IC
Ipc O \BaseNamedObjects\MSCTF.Shared.MUTEX.IAO
Ipc O \BaseNamedObjects\MSCTF.Shared.MUTEX.ICO
Ipc O \BaseNamedObjects\MSCTF.Shared.SFM.IAO
Ipc O \BaseNamedObjects\MSCTF.Shared.SFM.ICO
Ipc O \BaseNamedObjects\RasPbFile
Ipc O \BaseNamedObjects\Sandboxie_DeviceIdList
Ipc O \BaseNamedObjects\Sandboxie_DeviceSetupClasses
Ipc O \BaseNamedObjects\SENS Information Cache
Ipc O \BaseNamedObjects\ShimCacheMutex
Ipc O \BaseNamedObjects\ShimSharedMemory
Ipc O \BaseNamedObjects\WDMAUD_Callbacks
Ipc O \BaseNamedObjects\WininetConnectionMutex
Ipc O \BaseNamedObjects\WininetProxyRegistryMutex
Ipc O \BaseNamedObjects\WininetStartupMutex
Ipc O \KnownDlls\advapi32.dll
Ipc O \KnownDlls\appHelp.dll
Ipc O \KnownDlls\COMCTL32.dll
Ipc O \KnownDlls\comdlg32.dll
Ipc O \KnownDlls\CRYPT32.dll
Ipc O \KnownDlls\gdi32.dll
Ipc O \KnownDlls\iertutil.dll
Ipc O \KnownDlls\imagehlp.dll
Ipc O \KnownDlls\kernel32.dll
Ipc O \KnownDlls\MSASN1.dll
Ipc O \KnownDlls\msvcrt.dll
Ipc O \KnownDlls\NETAPI32.dll
Ipc O \KnownDlls\Normaliz.dll
Ipc O \KnownDlls\ole32.dll
Ipc O \KnownDlls\oleaut32.dll
Ipc O \KnownDlls\rpcrt4.dll
Ipc O \KnownDlls\shell32.dll
Ipc O \KnownDlls\SHLWAPI.dll
Ipc O \KnownDlls\urlmon.dll
Ipc O \KnownDlls\user32.dll
Ipc O \KnownDlls\USERENV.dll
Ipc O \KnownDlls\version.dll
Ipc O \KnownDlls\wininet.dll
Ipc O \KnownDlls\WINTRUST.dll
Ipc O \KnownDlls\wldap32.dll
Ipc O \LsaAuthenticationPort
Ipc O \NLAPublicPort
Ipc O \NLS\NlsSectionCType
Ipc O \NLS\NlsSectionLocale
Ipc O \NLS\NlsSectionSortkey
Ipc O \NLS\NlsSectionSortTbls
Ipc O \NLS\NlsSectionUnicode
Ipc O \RPC Control\AudioSrv
Ipc O \RPC Control\DNSResolver
Ipc O \RPC Control\SbieSvcPort
Ipc O \RPC Control\senssvc
Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc O \ThemeApiPort
Ipc O \Windows\ApiPort
Ipc X \BaseNamedObjects\_!MSFTHISTORY!_
Ipc X \BaseNamedObjects\c:!documents and settings!jack!cookies!
Ipc X \BaseNamedObjects\c:!documents and settings!jack!local settings!history!history.ie5!
Ipc X \BaseNamedObjects\c:!documents and settings!jack!local settings!temporary internet files!content.ie5!
Ipc X \BaseNamedObjects\C:_Documents and Settings_Jack_Cookies_index.dat_851968
Ipc X \BaseNamedObjects\C:_Documents and Settings_Jack_Local Settings_History_History.IE5_index.dat_2277376
Ipc X \BaseNamedObjects\C:_Documents and Settings_Jack_Local Settings_Temporary Internet Files_Content.IE5_index.dat_3080192
Ipc X \BaseNamedObjects\LVPrcSrvEvnt_00000924
Ipc X \BaseNamedObjects\LVPrcSrvEvnt_00000f18
Ipc X \BaseNamedObjects\LVPrcSrvEvnt_00000f64
Ipc X \BaseNamedObjects\LVPrcSrvEvnt_00001138
Pipe -------------------------------
Pipe \Device\Mailslot\SBContext
Pipe O \Device\Afd
Pipe O \Device\Afd\AsyncConnectHlp
Pipe O \Device\Afd\Endpoint
Pipe O \Device\NamedPipe\ROUTER
Pipe O \Device\NamedPipe\ShimViewer
Pipe X \Device\Mailslot\SBContext
Pipe X \Device\NamedPipe\lsarpc
Pipe X \Device\NamedPipe\wkssvc
WinCls -------------------------------
WinCls O CicLoaderWndClass
WinCls O CicMarshalWndClass
WinCls O Shell_TrayWnd
WinCls X DevLdr
WinCls X DEVLDR
WinCls X DevLdr
WinCls X MsnMsgrUIManager
WinCls X Progman
WinCls X UPDDRV98


</sheepish grin>
JK

As a follow up to the above posting:

After deleting the sandbox and exiting Sandboxie, I closed all programs and did a restart. I got a dialog that "DEVLDR" was not responding and was being forced to shut down. It did not shut down through the message. I then did a manual shut down using the next dialog to pop up.

Windows then proceeded to shut down and restart normally. It did not do the instant shutdown that happens when a BSOD is generated.

I have had the impression that the BSOD only usually happens with the audio use, rather than always, so I don't know how significant this result is.

JK

You have a lot of stuff there but let's start with this.

Open Sandbox Settings in Sandboxie Control.

Go to the Resource Access -> IPC Access -> Direct Access page.
Click add, and enter:
\BaseNamedObjects\Devldr32

Then go to Resource Access -> Window Access page.
Click add, and enter:
DEVLDR

Then click OK all the way back. Let me know please if it makes a difference.

I did as you suggested and have tested it twice. Once with screamer-radio and once with IE7. In both cases I got a clean shut-down. I also noted that the audio drivers did not show up in the Sandboxie control window.

As I tried to say before, the BSOD has not seemed to be something that was occuring everytime I used Sandboxie and accessed audio, so, while I am encouraged with these results, I am not sure that we have it licked. I will test a few more times and post back.

Thanks very much for your help!

JK

Thanks, if these resources are enough to get devldr32.exe to stop running in the sandbox, then that's a great improvement already. I'm going to add them as defaults in Sandboxie. I also suspect that it was probably multiple instances of devldr32.exe that caused probems, so hopefully that may be resolved as well.